oobfuzz

Conduct OOB Fuzzing of targets with payloads towards callback server

Brought to you with courtesey of Team Entropy, with :heart: from
@ninposec, @mortensteenrasmussen & @CasperGN

Installation

Run installation via setup:

$ sudo -H python3 -m pip install .

Reasoning:
OOBFuzz requires GAU to run. As such, we need to apt-get install golang and fetch the binary with go get and move it into /usr/bin. This requires root permissions (unless obscure suid perhaps?) in order to do so. If in doubt, please chech setup.py to ensure that nothing malicious is happening.

Run

Update the payloads folder containing your own payloads.

Most often want to run as such:

$ python3 fuzzer.py --targets targets.txt --threads 17

External libs and thanks

• GAU

License